$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2a23f374-b646-3220-aee7-71cda2583630.roa File: 2a23f374-b646-3220-aee7-71cda2583630.roa (raw, json) Hash identifier: lKllDipuj71ShxaUzrgzOzIvIE0AL0GCRfI+DYJjSO8= Subject key identifier: E3:56:83:0E:6D:3E:EC:D8:88:EA:D2:6B:15:86:CC:1E:41:66:30:FE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B94760C9B6D3FF9934C8C00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2a23f374-b646-3220-aee7-71cda2583630.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 170.85.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:76:0c:9b:6d:3f:f9:93:4c:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=fa0dd65e-9c8d-45f5-acd0-efd7c8a9c0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:f2:3f:c1:89:b9:71:25:d8:3e:a9:de:b6: c5:29:f6:62:56:ca:6e:c5:34:4e:4d:62:7b:51:6a: 09:c8:c3:27:3f:94:dc:ba:1f:03:21:05:d4:2e:de: 5d:e1:5a:ef:1f:1a:80:25:3f:0a:97:fe:c3:f4:79: 31:2a:3d:b8:dc:14:10:79:8b:d4:69:e5:8f:3b:57: 38:63:e9:95:ca:33:5b:51:c2:d3:9d:74:a2:2a:3a: 0f:5d:7c:7b:c6:ed:c0:f5:3d:da:47:65:fa:7c:7e: 25:34:22:27:d6:c2:de:bc:77:0a:55:61:46:d3:61: 52:97:6f:4d:bc:fe:a3:51:28:2a:07:e2:38:c5:aa: 73:fa:8a:53:0a:a9:19:33:16:0e:c5:86:76:9d:c6: 66:22:1c:a9:49:45:ca:93:76:0a:02:e8:c9:69:45: 04:19:6c:4d:41:47:07:44:a0:44:0e:cd:99:c3:82: 89:e3:65:92:4e:51:18:a9:7d:91:78:24:a8:e7:22: a2:94:20:31:74:48:80:02:7e:35:15:10:62:28:55: 07:51:82:c9:b6:26:6c:91:26:c1:11:3c:05:7c:ee: d9:00:e3:4a:e0:65:01:1b:f6:4b:e6:ba:19:95:b4: 3a:2c:64:65:d3:df:49:6f:6e:90:06:45:10:c1:44: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:56:83:0E:6D:3E:EC:D8:88:EA:D2:6B:15:86:CC:1E:41:66:30:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2a23f374-b646-3220-aee7-71cda2583630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:02:11:cf:65:7b:98:04:70:61:db:df:e7:58:3a:15:d1:d6: 38:3f:a6:90:1b:06:ee:a0:ce:4b:e4:64:c7:52:84:05:3d:04: 5b:2e:f3:38:53:d4:2b:12:28:c2:11:ae:22:60:15:37:d4:21: c7:96:2c:85:39:1d:c9:67:78:b6:4d:ea:b3:67:e5:86:73:29: 14:cf:c7:87:0b:d4:df:14:f6:c3:08:19:5e:5d:e2:e5:4e:f3: 7f:cc:1e:9b:f3:cf:cf:79:57:73:b1:10:df:46:a4:8f:7b:e8: 89:ce:94:cc:48:e2:16:ac:15:1c:83:33:bd:35:c4:24:0f:63: f8:1c:cf:96:22:13:cb:fa:10:18:1c:81:86:25:00:b0:23:9c: 8e:99:1c:c2:c5:92:c4:e2:69:56:96:48:2f:24:4b:d0:24:78: 4a:6f:ef:fb:b6:5d:8c:a0:2f:68:2c:61:41:86:04:51:76:2b: a9:d0:0d:0f:a9:8b:f6:62:32:d1:a6:ab:92:52:53:8f:b5:61: 81:29:ce:77:6e:0d:c4:d0:61:59:a1:e5:6c:55:c5:d4:49:3b: 2c:e7:7b:eb:b8:e2:b7:14:7a:5c:40:85:88:56:84:aa:a3:c3: d8:02:33:1f:16:ec:cd:8f:44:1a:29:51:e5:7c:38:83:21:fe: ac:29:5e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lHYMm20/+ZNMjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk ZmEwZGQ2NWUtOWM4ZC00NWY1LWFjZDAtZWZkN2M4YTljMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHjyP8GJuXEl2D6p3rbFKfZiVspuxTROTWJ7 UWoJyMMnP5Tcuh8DIQXULt5d4VrvHxqAJT8Kl/7D9HkxKj243BQQeYvUaeWPO1c4 Y+mVyjNbUcLTnXSiKjoPXXx7xu3A9T3aR2X6fH4lNCIn1sLevHcKVWFG02FSl29N vP6jUSgqB+I4xapz+opTCqkZMxYOxYZ2ncZmIhypSUXKk3YKAujJaUUEGWxNQUcH RKBEDs2Zw4KJ42WSTlEYqX2ReCSo5yKilCAxdEiAAn41FRBiKFUHUYLJtiZskSbB ETwFfO7ZAONK4GUBG/ZL5roZlbQ6LGRl099Jb26QBkUQwUS+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONWgw5tPuzYiOrSaxWGzB5BZjD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmEyM2YzNzQtYjY0Ni0z MjIwLWFlZTctNzFjZGEyNTgzNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUCEc9le5gEcGHb3+dYOhXR1jg/ppAbBu6gzkvkZMdShAU9BFsu8zhT 1CsSKMIRriJgFTfUIceWLIU5HclneLZN6rNn5YZzKRTPx4cL1N8U9sMIGV5d4uVO 83/MHpvzz895V3OxEN9GpI976InOlMxI4hasFRyDM701xCQPY/gcz5YiE8v6EBgc gYYlALAjnI6ZHMLFksTiaVaWSC8kS9AkeEpv7/u2XYygL2gsYUGGBFF2K6nQDQ+p i/ZiMtGmq5JSU4+1YYEpznduDcTQYVmh5WxVxdRJOyzne+u44rcUelxAhYhWhKqj w9gCMx8W7M2PRBopUeV8OIMh/qwpXiU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:02:57 2026 by rpki-client